Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft
File:                     F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft (raw, json)
Hash identifier:          K1VYmbbIZYm1Sti9pvBX8ch4MFSz3Aziefes/3PE05g=
Subject key identifier:   E2:F6:73:3C:E8:A8:64:12:10:94:46:34:25:CF:13:51:4A:E5:B3:1E
Authority key identifier: F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87
Certificate issuer:       /CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
Certificate serial:       33D800E613DB245D0ECFF7EEC904022EC6B9E044
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft
Manifest number:          03D3
Signing time:             Mon 04 Aug 2025 02:41:30 +0000
Manifest this update:     Mon 04 Aug 2025 02:36:30 +0000
Manifest next update:     Thu 07 Aug 2025 11:27:30 +0000
Files and hashes:         1: 323430373a366163303a373a3a2f34382d3438203d3e20313431393638.roa (hash: H0heYtYlkiqF1JOZLA75evZ+R7+2gTE9FhKGOY4qFto=)
                          2: 323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa (hash: i9GvNkyfVktZnuc1oAELuofP3JYCpb4PpDLCTWU1Jg8=)
                          3: 323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa (hash: mhxOtleUhwzJQhVm0X1OZ2EBHI9+zCiCaY9ucqS4Jbw=)
                          4: 323430373a366163303a31313a3a2f34382d3438203d3e20313431393638.roa (hash: 2chvHLKN2+W7Ez0a9FJ2ZAibtwsAcniBMJVzgn1jnUI=)
                          5: 3130332e3136372e33342e302f32342d3234203d3e20313431393638.roa (hash: 7+wvvnCh9i5VufJ7XDupsckYbKLQHErrwpdbL5bBKNQ=)
                          6: 323430373a366163303a31303a3a2f34382d3438203d3e20313431393638.roa (hash: WjiC/4IOcY11bGzxV4yfq6TwxhEy6JBQtJjKARRyL8E=)
                          7: 323430373a366163303a393a3a2f34382d3438203d3e20313431393638.roa (hash: 3TCdJ5SKQQMneW5BgHP+DZSO8att1WsR7XVtJ7bCTjA=)
                          8: 323430373a366163303a343a3a2f34382d3438203d3e20313431393638.roa (hash: iRpAsPLIt0OsWq1bi/rfMIqgNubQbkkMF3mJVeaa9Nw=)
                          9: 323430373a366163303a31323a3a2f34382d3438203d3e20313431393638.roa (hash: J0xuTYusy02zRfK27HjVDiO/VRw6jpBMupDPcjT2vl8=)
                          10: 323430373a366163303a353a3a2f34382d3438203d3e20313431393638.roa (hash: AOzuRVdhFTERJDmeQClX0B+JMFOgUCfH/lx7mkl3uvQ=)
                          11: 3130332e3136372e33352e302f32342d3234203d3e20313431393638.roa (hash: toZR/Jsqz5eQ/RDfxtHGOlqep9bRFZ0ONRZgu1L0Uec=)
                          12: 323430373a366163303a363a3a2f34382d3438203d3e20313431393638.roa (hash: 10e/sVVO6EupS3RVFNeyMg4lda2Dkn4iEE7+U5ce94Q=)
                          13: 323430373a366163303a333a3a2f34382d3438203d3e20313431393638.roa (hash: 3SKQ4iz2ufWkk2MYpg2iPHnF6jxRCTr8PBuax5FlebY=)
                          14: 323430373a366163303a3a2f33322d3332203d3e20313431393638.roa (hash: jGPbTLVV7jn3lV6yTnJElLdoxzWapOayDJgNMTEnxY8=)
                          15: F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl (hash: 4GCbP49M7t6BhGwWeh0YnIN7Z8+10SyuJBPV3K60Yn4=)
                          16: 323430373a366163303a313a3a2f34382d3438203d3e20313431393638.roa (hash: FxygXHMJkUSekdOPOQwnKQAouwcJ3vAqbrZz6plOspU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl
                          rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 Aug 2025 11:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d8:00:e6:13:db:24:5d:0e:cf:f7:ee:c9:04:02:2e:c6:b9:e0:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387
        Validity
            Not Before: Aug  4 02:36:30 2025 GMT
            Not After : Aug  7 11:27:30 2025 GMT
        Subject: CN=E2F6733CE8A864121094463425CF13514AE5B31E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5c:46:8a:1d:68:b7:b4:79:d5:f9:ef:66:f7:
                    73:d5:6d:0d:0e:f5:37:3c:1a:a5:38:2a:b6:5f:cc:
                    ec:c5:31:63:29:b4:e0:f9:00:6d:5e:9f:a2:e3:06:
                    24:2a:36:83:94:47:19:b1:51:23:44:ed:e3:21:83:
                    a6:3e:f6:93:8d:c4:9a:5d:29:9b:43:14:47:3b:78:
                    60:93:e3:b0:e8:1f:e9:0b:51:28:7b:b5:11:7a:ac:
                    58:27:4f:1b:63:1d:dd:9a:72:d4:75:7b:1d:e6:e8:
                    c3:6d:15:71:81:a0:e0:72:b5:88:42:44:35:53:79:
                    a2:db:ab:19:49:4f:46:89:15:2d:30:4e:2c:72:84:
                    0d:96:f7:50:06:8e:42:a6:04:16:6a:0f:06:d8:0e:
                    1f:43:35:22:17:0b:77:60:fd:b0:88:90:cf:69:83:
                    a5:93:02:9c:ce:4f:10:ff:ac:36:62:1a:70:5c:e6:
                    5d:71:5d:dc:86:d0:de:c8:77:e2:2c:17:1e:79:ae:
                    72:00:d8:ca:87:41:6e:be:d5:6c:ea:e3:b4:27:97:
                    32:09:3a:59:f1:05:82:0f:a7:da:05:df:e3:32:4f:
                    da:e3:56:61:78:de:5b:48:93:b4:f3:53:1b:50:73:
                    ae:a7:76:6b:1f:d9:b6:8c:a7:67:e1:ab:be:00:5b:
                    e4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F6:73:3C:E8:A8:64:12:10:94:46:34:25:CF:13:51:4A:E5:B3:1E
            X509v3 Authority Key Identifier:
                keyid:F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:eb:f5:a7:68:18:a8:e2:e5:a9:4a:1f:98:8a:83:82:8f:18:
         df:39:8d:ad:36:39:a0:46:f6:e0:66:85:b5:e3:ab:ee:90:05:
         2d:58:35:ba:d6:a7:a5:fc:fe:0b:15:6b:00:0a:96:dd:93:f7:
         4e:46:86:10:43:cf:af:ee:38:f2:3b:31:f6:d0:26:4c:d8:95:
         58:16:a0:ba:a0:76:1b:bc:88:5a:2d:31:08:97:d8:3a:61:49:
         d0:c0:23:4c:cd:ee:89:5f:54:a5:aa:35:96:7c:b5:d9:65:b2:
         9c:23:b4:d0:a6:16:5e:3a:70:dc:f0:b2:4f:7b:cf:8d:e3:56:
         67:76:ea:a3:37:7e:ca:49:58:5b:24:47:fb:01:07:9a:be:aa:
         92:7a:a4:77:d1:51:86:c9:76:eb:10:ef:89:2f:25:c2:61:2c:
         47:f6:e6:14:21:b9:59:2b:78:c7:d6:30:bf:8f:82:c3:fc:3c:
         af:6c:0f:b2:fd:01:2e:14:df:0b:c0:cc:fd:58:e5:f0:43:44:
         b0:f9:54:7e:d3:0f:13:18:98:b3:d8:7c:d1:1c:fc:77:2b:0b:
         a9:60:85:d5:8b:9f:54:2c:bc:d3:c2:b4:80:eb:90:d1:5a:2f:
         a5:1a:51:ce:dd:66:b5:41:fc:af:25:00:7f:af:c5:18:f0:75:
         c0:fe:a0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:26:04 2025 by rpki-client